Can I overwrite MAC address of Archer C2

[dogfight]

I have a TPLink archer C2, I want to permanently modify it's 5G and 2.4G wireless MAC. Can I do it?

[andyboeh]

@dogfight

permanently

What exactly is your definition of permanently?

[dogfight]

I mean it overwrite the address at ROM level. I can reset the router without losing it.

[andyboeh]

You can, but you need to modify the radio partition of your device. I'm not sure if that's legal, so I'm not providing instructions.

[_bernd]

You can create an image with the image builder which contains a UCI config with the changed Mac address so even if you reset your device this chance is persistent.

[dogfight]

how can I do it. Pls give me some instruction links.

[dogfight]

Pls give me instruction link. Thank you!

[dogfight]

The reason behind is: someone know this router's 5G MAC address, and he use it to perform deauth attack on my another router. The Archer C2 connect to my another router using 5G and WDS.

[_bernd]

Using the Image Builder

UCI defaults

[d687r02j8g]

Enable 802.11w this will mitigate deauth attacks. No need to change Mac address.

If you change your Mac, your adversary can find out the new one easily.

[dogfight]

Is it "Protected Management Frames" option?

[d687r02j8g]

Thats the one. Then you won't suffer from deauth attacks anymore.

[dogfight]

The issue is: when enable it on the main router, the TPLink Archer C2 cannot connect to it

[dogfight]

I dont understand much. From a prebuilt Archer C2 firmware, how can I modify it to also change the MAC address while flashing the firmware?

[andyboeh]

Try to change it via LuCI first: Network -> Wireless -> Edit Network -> Advanced Settings -> MAC address. If that works you can think about making the change permanent.

Btw: How often do you reset your router so that this is really necessary!?

[dogfight]

The reason behind is: someone know this router's 5G MAC address, and he use it to perform deauth attack on my another router. The Archer C2 connect to my another router using 5G and WDS.

[lleachii]

If you're OK with doing this via configs - and not permanently in the WiFi chip:

@lleachii

This is a Wireless WWAN example:

config wifi-iface
	option network 'wwan'
	option device 'radio0'
	option mode 'sta'
	option encryption 'psk2+ccmp'
	option key 'xxxxxxxxxxxxxxxxxxxxxxx'
	option ssid 'xxxxxxxxxxxxxxxxxxxxxx'
	option macaddr 'xx:xx:xx:xx:xx:xx'

And the default 2.4 config with MAC setting:

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
	option macaddr 'xx:xx:xx:xx:xx:xx'

Simply add an option macaddr under your 5.4 GHz config wifi-iface entry.

[slh]

And they will know your new MAC within 5 minutes, if you want to solve this, keep the MAC and enable 802.11w.

[dogfight]

Thank you! I will try

[dogfight]

Thanks. :(. So 802.11w is a must.